# CISA Publications

## Core Resources

### Known Exploited Vulnerabilities (KEV) Catalog
- URL: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- Searchable web + downloadable JSON/CSV. 1,484+ vulnerabilities.
- BOD 22-01 mandates federal remediation by stated dates.
- Patch these first regardless of CVSS score.

### Zero Trust Maturity Model v2.0 (Apr 2023)
- URL: https://www.cisa.gov/zero-trust-maturity-model
- Five pillars: Identity, Devices, Networks, Applications/Workloads, Data
- Three cross-cutting: Visibility/Analytics, Automation/Orchestration, Governance
- Four maturity stages: Traditional, Initial, Advanced, Optimal

### Shields Up
- Main: https://www.cisa.gov/shields-up
- Org guidance: https://www.cisa.gov/shields-guidance-organizations

### Shields Ready (Critical Infrastructure Resilience)
- URL: https://www.cisa.gov/shields-ready

### Secure by Design
- URL: https://www.cisa.gov/securebydesign

### Cybersecurity Alerts and Advisories (real-time)
- URL: https://www.cisa.gov/news-events/cybersecurity-advisories

### Best Practices Portal
- URL: https://www.cisa.gov/topics/cybersecurity-best-practices

## Incident Response

### IR Training Pathway
- PDF: https://www.cisa.gov/sites/default/files/2025-09/Incident-Response-Pathway_Course-Catalog-FY26-Update_FINAL-508.pdf

### SIEM and SOAR Implementation Guidance (May 2025)
- URL: https://www.cisa.gov/news-events/alerts/2025/05/27/new-guidance-siem-and-soar-implementation

### Digital Forensics Plan for Control Systems
- PDF: https://www.cisa.gov/sites/default/files/recommended_practices/Forensics_RP.pdf

### Network Edge Device Protection
- URL: https://www.cisa.gov/resources-tools/resources/guidance-and-strategies-protect-network-edge-devices

### Enhanced Visibility Guidance for Communications Infrastructure (Dec 2024)
- URL: https://www.cisa.gov/resources-tools/resources/enhanced-visibility-and-hardening-guidance-communications-infrastructure

## Tools

### RITA (Real Intelligence Threat Analytics)
- CISA page: https://www.cisa.gov/resources-tools/services/rita
- GitHub: https://github.com/activecm/rita
- Beacon detection, DNS tunneling, long connections, data exfil detection